This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa File: okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa (raw, json) Hash identifier: hH8YmXQn5X8TblBZy3b0UzoPWUDgyN7U0BO4gNmqkZc= Subject key identifier: A2:4A:71:92:95:D5:91:3B:A8:C5:C8:C5:3D:05:7A:15:0A:1E:D0:68 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA52A8244259E27D34129EDADCA77 Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200649 IP address blocks: 62.228.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a5:2a:82:44:25:9e:27:d3:41:29:ed:ad:ca:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a24a719295d5913ba8c5c8c53d057a150a1ed068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:06:0f:9b:8e:8f:ed:fe:01:0a:65:e8:20:54: 81:ea:54:19:be:30:2e:ba:36:f7:d8:5f:69:9f:fd: 3b:27:c7:2a:d5:ff:74:62:1d:7e:e4:7d:ce:0b:70: e9:4e:40:ab:e7:11:0b:c0:84:8e:18:b5:9a:22:69: bd:c9:1a:95:39:7f:c2:a1:01:53:ab:a9:54:a2:00: a0:86:93:3e:02:03:74:b8:9f:55:b1:da:10:2f:c7: 5c:72:43:ec:0f:e7:f6:89:6b:e3:42:2d:dc:68:82: 70:67:8e:ad:2f:6e:c9:74:43:f3:2e:82:b7:1f:d1: 05:65:28:e2:15:49:f8:22:be:ec:0a:da:2f:9a:54: e0:85:ec:51:de:69:0f:77:b6:5d:78:63:6e:0e:32: 1a:e9:fa:12:81:3e:59:e2:3a:81:d3:89:27:02:8a: bf:7a:c6:71:25:57:5f:97:24:85:54:2c:93:1a:aa: 1e:42:6b:46:b0:48:a7:39:ca:ce:f5:36:3d:5d:81: 0c:4c:84:ca:90:2a:b8:a8:aa:3c:3d:57:1f:70:74: c9:e4:a8:70:84:ea:60:5f:60:ce:ea:97:4f:2e:3f: 6f:3b:a7:f3:2a:e3:1f:42:57:3a:5f:28:10:0d:a2: 91:ec:21:57:3d:07:08:47:97:13:3d:25:55:64:fa: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:71:92:95:D5:91:3B:A8:C5:C8:C5:3D:05:7A:15:0A:1E:D0:68 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/okpxkpXVkTuoxcjFPQV6FQoe0Gg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.228.243.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:16:0b:d2:b8:31:fe:72:22:39:da:1e:44:04:ec:48:c5:64: b2:f9:d8:1b:ff:8f:2d:32:3e:96:b9:ff:b0:bd:50:c0:3b:73: 75:6a:ac:f9:6a:3b:87:f8:f3:c4:de:17:e0:9c:e1:c6:a2:9e: 81:8b:88:b7:a3:1b:50:b5:60:28:19:54:a6:dd:b1:00:9a:39: 04:0a:0d:54:19:63:66:9d:35:b7:ce:34:a9:e6:f9:77:ac:43: d0:52:f8:2a:86:54:cf:32:dd:d1:35:45:89:db:50:33:cf:b6: b8:46:15:65:8c:80:bf:5b:30:22:ea:1f:8c:95:86:63:83:17: 9d:36:63:90:10:5a:2b:54:28:2f:a6:7c:1a:80:66:d7:14:f3: fb:46:2c:8b:2d:8d:9b:aa:1d:00:9d:8b:86:11:4a:f6:b1:f2: 9c:42:78:03:2b:b3:40:38:ef:5f:18:53:f9:ca:12:1e:f7:95: 4d:91:59:58:5b:89:3d:a6:2d:2f:a2:84:d3:1d:61:e0:6b:e4: 7e:61:93:b2:ea:bb:d1:52:cb:37:83:b2:82:dd:54:b1:22:8f: f0:13:5f:9c:0c:f7:14:d7:e1:b3:e2:8c:0b:25:76:a2:ec:9c: 55:d7:e4:2f:e4:2b:d7:c6:fd:2b:f4:78:2a:49:4a:fb:e0:d3: 68:ed:c6:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266UqgkQlnifTQSntrcp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjRhNzE5Mjk1ZDU5MTNiYThjNWM4YzUzZDA1N2ExNTBhMWVkMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AYPm46P7f4BCmXoIFSB6lQZvjAu ujb32F9pn/07J8cq1f90Yh1+5H3OC3DpTkCr5xELwISOGLWaImm9yRqVOX/CoQFT q6lUogCghpM+AgN0uJ9VsdoQL8dcckPsD+f2iWvjQi3caIJwZ46tL27JdEPzLoK3 H9EFZSjiFUn4Ir7sCtovmlTghexR3mkPd7ZdeGNuDjIa6foSgT5Z4jqB04knAoq/ esZxJVdflySFVCyTGqoeQmtGsEinOcrO9TY9XYEMTITKkCq4qKo8PVcfcHTJ5Khw hOpgX2DO6pdPLj9vO6fzKuMfQlc6XygQDaKR7CFXPQcIR5cTPSVVZPr+YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKJKcZKV1ZE7qMXIxT0FehUKHtBoMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvb2tweGtwWFZrVHVveGNqRlBRVjZGUW9lMEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuTzMA0G CSqGSIb3DQEBCwUAA4IBAQBrFgvSuDH+ciI52h5EBOxIxWSy+dgb/48tMj6Wuf+w vVDAO3N1aqz5ajuH+PPE3hfgnOHGop6Bi4i3oxtQtWAoGVSm3bEAmjkECg1UGWNm nTW3zjSp5vl3rEPQUvgqhlTPMt3RNUWJ21Azz7a4RhVljIC/WzAi6h+MlYZjgxed NmOQEForVCgvpnwagGbXFPP7RiyLLY2bqh0AnYuGEUr2sfKcQngDK7NAOO9fGFP5 yhIe95VNkVlYW4k9pi0vooTTHWHga+R+YZOy6rvRUss3g7KC3VSxIo/wE1+cDPcU 1+Gz4owLJXai7JxV1+Qv5CvXxv0r9HgqSUr74NNo7cb1 -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:30 2026 by rpki-client